Static task
static1
Behavioral task
behavioral1
Sample
72932b9f1884e066fe30966a1a3089b26208297cd6ecbfd76249d9b82b5cb616.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
72932b9f1884e066fe30966a1a3089b26208297cd6ecbfd76249d9b82b5cb616.exe
Resource
win10v2004-en-20220113
General
-
Target
72932b9f1884e066fe30966a1a3089b26208297cd6ecbfd76249d9b82b5cb616
-
Size
32KB
-
MD5
216832fb0d4a2660207d1d3129d3df9e
-
SHA1
909235013e83dad057fedc4ce3d4a64ac3dbd88c
-
SHA256
72932b9f1884e066fe30966a1a3089b26208297cd6ecbfd76249d9b82b5cb616
-
SHA512
054f69b044a8192663720927e5e46dad0199a30164b0a595dab0a1da9e6d9019c20bcfba2c43e6cb01de397d18698a6aa5aa67bc3faa3db598658753ad5821f3
-
SSDEEP
384:zrit2wUQCG+JexvsiOrhAh9kLAZFPI+uT00RlDModg9TdFpyFEIGsJjwE7UMcri:aiGtUrrhAAAmiouDbEEIGfRB+f
Malware Config
Extracted
njrat
Hacked By HiDDen PerSOn
3a7cf98516f6e8ccf3f592aaa4ca5cb5
-
reg_key
3a7cf98516f6e8ccf3f592aaa4ca5cb5
Signatures
-
Njrat family
Files
-
72932b9f1884e066fe30966a1a3089b26208297cd6ecbfd76249d9b82b5cb616.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ